Local File Inclusion Vulnerability in Hygia Theme by AxiomThemes
CVE-2025-53453

8.1HIGH

Key Information:

Vendor

WordPress
Status
Hygia
Vendor
CVE Published:
18 December 2025

What is CVE-2025-53453?

The Hygia theme by AxiomThemes is susceptible to a Local File Inclusion vulnerability due to improper control of filename during include or require operations in PHP. This flaw allows attackers to exploit the theme, leading to potential unauthorized access to sensitive files on the server. This vulnerability affects all versions up to and including 1.16, emphasizing the need for developers and website administrators to promptly address the issue to mitigate risks.

Affected Version(s)

Hygia 0 <= 1.16

References

https://patchstack.com/database/Wordpress/Theme/hygia/vul...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bonds | Patchstack Bug Bounty Program
.